Anvil

Runtime-first privilege escalation and attack surface assessment for Windows thick clients. Anvil is a runtime-first privilege escalation and attack surface assessment tool for Windows thick client applications. Rather than scanning the filesystem blindly, it pairs Procmon capture with Windows...

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY Inspect exploited vulnerabilities and threat indicators, check their source evidence, and review retained changes. Open the live Observatory · Try the KEV walkthrough · Source coverage · Run it yourself The Observatory brings CISA KEV, ThreatFox, URLhaus, and...

cyber-decoy

cyber-decoy A containerized network decoy honeypot that advertises SSH , RDP , and SMB , observes every inbound connection with eBPF , and reverse-proxies each session into an isolated decoy container. The design separates two concerns: 1. Observation. An eBPF TC classifier attached to the broker...

Linux Distros Unpatched Vulnerability : CVE-2026-112906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacker...

CVE-2026-112906

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacker pre-dates and removes its own marker, at least two lock-user processes are waiting, coarse or matching modification times preserve the...

CVE-2026-112906

filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacker pre-dates and removes its own marker, at least two lock-user processes are waiting, coarse or matching modification times preserve the...

PT-2026-118384

Name of the Vulnerable Software and Affected Versions filelock versions 4.1.0 through 4.2.0 Description In the SoftFileLock implementation, a stale observation can be reused. This occurs when an attacker pre-dates and removes their own marker while at least two lock-user processes are waiting. If...

Astra Linux – Vulnerability in Firefox

The Performance API did not properly hide the fact that whether a request to a cross-origin resource has observed redirects. This vulnerability affects Firefox versions less than 100...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: All fields within the struct nexthopgrp structure must be initialized. The struct nexthopgrp contains two reserved fields that are not initialized by nlaputnhgroup, and these fields contain garbage values. This can ...

CVE-2026-53711

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

CVE-2026-53711 MCP ContextForge: Global Prompts stored cross-site scripting compromises the Admin UI

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

CVE-2026-53711: Improper Neutralization of Input During Web Page Generation

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

windows-malware-behavioral-analysis

Analisi Comportamentale del Malware con REMnux & FLARE-VM Un'indagine pratica di malware per Blue Team che dimostra come eseguibili Windows sospetti possano essere analizzati in sicurezza all'interno di un laboratorio isolato utilizzando tecniche di analisi comportamentale. Piuttosto che invertir...

AlmaLinux 9.6 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc (ALMALINUX9.6:CLSA-2026:1777056907)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777056907 advisory. - In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an applicatio...

CVE-2026-97687 urllib3: HTTPS proxy TLS configuration may be ignored or overridden

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

CVE-2026-101904

Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-process prototype-pollution flaw sets Object.prototype.headers, and trust...

GAZEleak: Passcode Inference against Eye-Tracking XR Devices through External Observation

Mixed-reality headsets such as Apple Vision Pro replace the touch screen with gaze-as-pointer interaction: the wearer looks at a target and confirms with an air pinch. Because the display is inside the headset and the eye tracker is walled off from third-party software, such input is widely assum...

CVE-2026-90817

creationtimestamp| type| source ---|---|--- 2026-09-20 13:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvxbywajb42y 2026-09-20 13:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117303608917482607 2026-09-20 13:30:27+00:00| seen|...

CVE-2026-83268

creationtimestamp| type| source ---|---|--- 2026-09-16 01:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyznq5cq2j 2026-09-16 02:12:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2ttfl4i24 2026-09-16 16:00:43+00:00| seen|...

CVE-2026-73947

creationtimestamp| type| source ---|---|--- 2026-09-15 22:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnbeq7ba2p 2026-09-15 22:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlnc22gtx2g 2026-09-22 06:37:07+00:00| seen|...